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RECEIVED 

CENTRAL FAX CENTER 

DEC 2 7 2005 

IL AMENDMENT TO THE SPECIFICATIONS: 

Please accept amendments to page 8, second full paragraph (starting at line 19) as 
follows: 

I/O interfaces 1 4 may comprise any system for exchanging information to/from an 
external source. External devices 18 may comprise any known type of external device, including 
a Cathode Rav Tube ( CRT), Light-Emitting Diode ( LED) screen, hand-held device, keyboard, 
mouse, voice recognition system, speech output system, printer, facsimile, pager, personal digital 
assistant, cellular phone, web phone, etc. Bus 20 provides a communication link between each 
of the components in the computer system 1 1 and likewise may comprise any known type of 
transmission link, including electrical, optical, wireless, etc. In addition, although not shown, 
additional components, such as cache memory, communication systems, system software, etc., 
may be incorporated into computer system 1 1 * 

Please accept amendments to page 1 1, first full paragraph (starting at line 12) as follows: 
Preferably the data submitted (i.e., in length U) by each provider 28 should have a 

particular format (e.g., Extensible Markup Language (X ML)). One example of a data message is 

shown below: 

Please accept amendments to page 15, first full paragraph (starting at line 15) as follows: 

Program approval system 52 authorizes the use of a data analysis system. 26 for analyzing 

data collected by data management system 1 0. Specifically, as shown in Fig. 1, computer system 
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1 1 could be provided with a software program (i.e., data analysis system) that can manipulate the 
provided data. However, before a particular system 26 can be implemented, permission could be 
required. In a typical embodiment shown in Fig. 4, a group of experts 100 could create a new 
data analysis system 26. This data analysis system 26 is circulated among the member entities 
4-00 102 A-F and each signs a well-defined hash of the data analysis system 26. The data 
analysis system 26 with all member signatures is then sent to the data management system 10, 
where al) signatures are checked before the data analysis system 26 is accepted. Requests for 
actions of the existing program will similarly carry all needed signatures. In some case, copies of 
such requests will be kept by all members who can request the corresponding analysis at will, 
and unknowingly from the others. In other cases, all or some members must sign the inqui ry just 
before it is made, or once for any inquiry with no control of the actual time of use. Validity of 
the signatures and their authority level will be checked with a tool such as Tivoli Policy Director. 

Please accept amendments to page 1 9, second full paragraph (starting at line 1 1) as 
follows: 

Referring back to Fig. [1] 2, communication with data management system 10 occurs via 

communication links 32. Communications links 32 can include a direct terminal connected to 

the data management system 10, or a remote workstation in a client-server environment. In the 

case of the latter, the client and server may be connected via the Internet, wide area networks 

(WAN), local area networks (LAN) or other private networks. The server and client may utilize 

conventional token ring connectivity, Ethernet, or other conventional communications standards. 

Where the client is connected to the system server via the Internet, connectivity could be 
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provided by conventional TCP/IP sockets-based protocol. In this instance, the client would 
utilize sun Internet service provider outside the system to establish connectivity to the system 
server within the system. 

Please accept amendments to paragraph at page 31, Abstract, as follows: 
A data management system and method are provided. Specifically, the present invention 
includes a system for controlling access to data and ensuring that the confidentiality of the data is 
maintained. In addition, the present invention provides a system for updating data so that 
confidential data, which has become non-confidential, can be identified and exposed. 
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